CVE-2023-28299: Microsoft Visual Studio 2017

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Visual Studio Spoofing Vulnerability

Affected products

• Microsoft Visual Studio 2017: from 15.0, before 15.9.54 (fixed in 15.9.54)
• Microsoft Visual Studio 2019: from 16.0, before 16.11.26 (fixed in 16.11.26)
• Microsoft Visual Studio 2022: from 17.0, before 17.0.21 (fixed in 17.0.21); from 17.2.0, before 17.2.15 (fixed in 17.2.15); from 17.4.0, before 17.4.7 (fixed in 17.4.7); from 17.5.0, before 17.5.4 (fixed in 17.5.4)

Published 2023-04-11. Last modified 2026-06-17.